An error occurred while processing the template.

Java method "com.liferay.portal.json.JSONFactoryImpl.createJSONObject(String)" threw an exception when invoked on com.liferay.portal.json.JSONFactoryImpl object "com.liferay.portal.json.JSONFactoryImpl@51577ebb"; see cause exception in the Java stack trace.

----
FTL stack trace ("~" means nesting-related):
	- Failed at: navigationJSONObject = jsonFactoryUti...  [in template "17855804202317#32484267#LEARN-ARTICLE-NAV" at line 4, column 9]
----

1<#assign

2	groupFriendlyURL = themeDisplay.getScopeGroup().getFriendlyURL()

3	groupPathFriendlyURLPublic = themeDisplay.getPathFriendlyURLPublic() + groupFriendlyURL

4	navigationJSONObject = jsonFactoryUtil.createJSONObject(navigation.getData())

5	navigationMenuItems =

6		{

7			"Analytics Cloud": {

8				"image": "/documents/d${groupFriendlyURL}/analytics_c-svg",

9				"title": "Analytics Cloud",

10				"url": "analytics-cloud"

11			},

12			"Commerce": {

13				"image": "/documents/d${groupFriendlyURL}/commerce_product-svg",

14				"title": "Commerce",

15				"url": "commerce"

16			},

17			"DXP": {

18				"image": "/documents/d${groupFriendlyURL}/dxp_p-svg",

19				"title": "DXP / Portal",

20				"url": "dxp"

21			},

22			"Liferay Cloud": {

23				"image": "/documents/d${groupFriendlyURL}/dxp_c-svg",

24				"title": "Liferay Cloud",

25				"url": "liferay-cloud"

26			},

27			"Reference": {

28				"image": "/documents/d${groupFriendlyURL}/reference-svg",

29				"title": "Reference",

30				"url": "reference"

31			}

32		}

34	breadcrumbJSONArray = navigationJSONObject.getJSONArray("breadcrumb")

35	childrenJSONArray = navigationJSONObject.getJSONArray("children")

36	parentJSONObject = navigationJSONObject.getJSONObject("parent")

37	productJSONObject = breadcrumbJSONArray.getJSONObject(breadcrumbJSONArray.length()-1)!navigationJSONObject.getJSONObject("self")

38	siblingsJSONArray = navigationJSONObject.getJSONArray("siblings")

39/>

41<div class="learn-article-nav">

42	<#if productJSONObject?has_content && productJSONObject.getString("title")?has_content && navigationMenuItems[productJSONObject.getString("title")]?has_content && navigationMenuItems[productJSONObject.getString("title")].title?has_content>

43		<div

44			class="dropdown learn-article-nav-root learn-dropdown"

45		>

46			<div class="learn-article-nav-item">

47				<div class="d-flex">

48					<div class="learn-article-nav-image">

49						<img

50							class="lexicon-icon lexicon-icon-caret-bottom product-icon"

51							role="presentation"

52							src='${navigationMenuItems[productJSONObject.getString("title")].image}'

53							viewBox="0 0 512 512"

54						/>

55					</div>

57					<span class="learn-article-nav-text">${navigationMenuItems[productJSONObject.getString("title")].title}</span>

58				</div>

60				<div id="dropdown-icon">

61					<svg

62						class="lexicon-icon lexicon-icon-caret-bottom"

63						role="presentation"

64						viewBox="0 0 512 512"

65					>

66						<use xlink:href="/o/admin-theme/images/clay/icons.svg#caret-bottom"></use>

67					</svg>

68				</div>

69			</div>

71			<ul class="dropdown-menu learn-dropdown-menu">

72				<#list navigationMenuItems as key, value>

73					<li>

74						<a

75							class="dropdown-item learn-article-nav-item"

76							href="/w/${navigationMenuItems[key].url}/index"

77							tabindex="4"

78						>

79							<span class="d-flex">

80								<span class="learn-article-nav-image">

81									<img

82										class="lexicon-icon lexicon-icon-caret-bottom product-icon mt-0 mr-2"

83										role="presentation"

84										src="${value.image}"height: 25px; margin-left: 5px; max-width: none; width: 25px;

85										viewBox="0 0 512 512"

86									/>

87								</span>

88								<span class="learn-article-nav-text">${value.title}</span>

89							</span>

91							<#if navigationMenuItems[productJSONObject.getString("title")].url == value.url>

92								<span>

93									<@clay["icon"] symbol="check" />

94								</span>

95							</#if>

96						</a>

97					</li>

98				</#list>

99			</ul>

100		</div>

101	</#if>

103	<div class="learn-article-nav-content">

104		<#if parentJSONObject?has_content && parentJSONObject.getString("url")?has_content>

105			<div class="learn-article-nav-item learn-article-nav-parent liferay-nav-item p-2">

106				<div class="mr-2">

107					<a

108						href='${parentJSONObject.getString("url")}'

109					>

110						<svg

111							class="lexicon-icon lexicon-icon-angle-left"

112							role="presentation"

113							viewBox="0 0 512 512"

114						>

115							<use xlink:href="/o/admin-theme/images/clay/icons.svg#angle-left"></use>

116						</svg>

117					</a>

118				</div>

120				<span>${parentJSONObject.getString("title")}</span>

121			</div>

122		</#if>

124		<#if childrenJSONArray.length() gt 0>

125			<ul class="m-0 p-2">

126				<#list 0..childrenJSONArray.length()-1 as i>

127					<li class="learn-article-nav-item">

128						<a

129							class='liferay-nav-item ${(navigationJSONObject.getJSONObject("self").url == childrenJSONArray.getJSONObject(i).url)?then("selected", "")}'

130							href="${childrenJSONArray.getJSONObject(i).url}"

131						>

132							<span>${childrenJSONArray.getJSONObject(i).getString("title")}</span>

133						</a>

134					</li>

135				</#list>

136			</ul>

137		<#elseif siblingsJSONArray.length() gt 0>

138			<ul class="m-0 p-2">

139				<#list 0..siblingsJSONArray.length()-1 as i>

140					<li class="learn-article-nav-item">

141						<a

142							class='liferay-nav-item ${(navigationJSONObject.getJSONObject("self").url == siblingsJSONArray.getJSONObject(i).url)?then("selected", "")}'

143							href="${siblingsJSONArray.getJSONObject(i).url}"

144						>

145							<span>${siblingsJSONArray.getJSONObject(i).getString("title")}</span>

146						</a>

147					</li>

148				</#list>

149			</ul>

150		</#if>

151	</div>

152</div>

Submit Feedback

Securing Web Services

Liferay DXP provides four security layers for web services:

IP permission layer: The IP address from which a web service invocation request originates must be white-listed in the portal properties file. A web service invocation coming from a non-whitelisted IP address automatically fails.

Service access policy layer: Methods corresponding to a web service invocation request must be whitelisted by each service access policy that’s in effect. You can use wildcards to reduce the number of service classes and methods that must be explicitly whitelisted.

Authentication/verification layer (browser-only): If a web service invocation request comes from a browser, the request must include an authentication token. This authentication token is the value of the p_auth URL parameter. The token is generated by Liferay DXP and associated with your browser session. The p_auth parameter is automatically supplied when you invoke a Liferay DXP web service via the JSON web services API page or via JavaScript using Liferay.Service(...). If Liferay DXP cannot associate the caller’s authentication token with a User, the web service invocation request fails.

User permission layer: Properly implemented web services have permission checks. The user invoking a web service must have permission to invoke the service.

Authorization

Liferay DXP contains several adjustable authorization layers:

Remote IP and HTTPS transport check to limit access to Liferay DXP’s Java servlets
Extensible Access Control Policies layer to perform portal service-related authorization checks
Extensible Role-based permission framework for Liferay assets (stored in the database or elsewhere)
Portlet container security checks that control portlet access
Remote IP check for remote API authentication methods
Service Access Policies to control access to remote APIs
Authentication Verifiers that verify provided credentials.
Cross-Origin Resource Sharing configuration can enable retrieving resources from trusted sources only.